IN THE CLAIMS 

This listing of the claim will replace all prior versions and listings of 
claim in the present application. 
Listing of Claims 

1. (currently amended) A server system comprising a plurality of 
servers that can be each operated as a primary system and a standby system 
by system switching, and a shared disk unit for storing data accessed by said 
plurality of servers, 

wherein each of said plurality of servers comprises: 
application means; 

driver means that acquires information on a configuration inside said 
shared disk unit after starting of said system at initial operation as both a 
primary system and a standby system and, based on said configuration 
information, identifies areas of said shared disk unit in which an access 
request can be sent and when the driver means receives an access request 
to said shared disk unit, sends said access request to said shared disk unit 
based on said configuration information; and 

access control means that judges whether an access request issued 
by said application means should be sent, based on a management table 
indicating inhibited types of access requests for each access destination and 
sends said access request to said driver means when said access request is 
not inhibited for an access destination of said access request, 

wherein switching between a server operating as the primary system 
and a server operating as the standby system is conducted by inhibiting or 



2 



permitting access requests of the standby system based on the management 
table. 

2. (currently amended) The server system according to Claim 1 , 
wherein when a fault occurs in a server operating as the primary system, then 
the access control means of said server registers in said management table 
such that an access request of said application on said server on which said 
fault occurs means to any access destination is inhibited. 

3. (previously presented) The server system according to Claim 1 , 
wherein said server system further comprises a console for sending said 
plurality of servers a system switching command inputted by an operator; and 

when a server operates as the primary system and the access 
control means of said server receives said system switching command, then, 
said access control means registers in said management table such that an 
access request of said application means to any access destination is 
inhibited. 

4. (previously presented) The server system according to claims 2 
or 3, wherein said access control means registers in said management table 
such that, as said access request, at least write is inhibited. 

5. (previously presented) The server system according to Claim 1 , 
wherein said management table indicates an inhibited read and/or write 
access request for each access destination; and 
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wherein said access control means judges, based on said 
management table, whether a read or write access request issued by said 
application means should be sent, and sends the read or write access request 
to said driver means when said access request is directed to an access 
destination for which the read or write access request is not inhibited. 

6. (previously presented) The server system according to Claim 1, 
wherein said management table indicates an inhibited file open and/or file 
close access request for each access destination; and 

wherein said access control means judges, based on said 
management table, whether a file open or file close access request issued by 
said application means should be sent, and sends the file open or file close 
access request to said driver means when said access request is directed to 
an access destination for which the file open or file close access request is 
not inhibited. 

7. (previously presented) The server system according to Claim 1 , 
wherein said server system further comprises a console for sending said 
plurality of servers a command for registering, deleting or changing inhibited 
access requests for each access destination, with said command being 
inputted by an operator; and 

when said access control means receives said command, then, 
according to said command, said access control means registers, deletes or 
changes an identifier specifying an access destination and types of access 
requests inhibited for said access destination, in said management table. 
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8. (original) The server system according to Claim 1, further 
comprising: 

a console for sending each of said plurality of servers a command 
that is inputted by an operator and that requests contents of the management 
table, and for outputting the contents of the management table received from 
the server in question. 

9. (currently amended) A server that can operate as a primary 
system and a standby system by system switching, comprising: 

application means; 

driver means that acquires, after starting of said server at initial 
operation as both a primary system and a standby system , information on a 
configuration inside a shared disk unit whose data are shared by a plurality of 
servers and based on said configuration information, identifies areas of said 
shared disk unit in which an access request can be sent and when the driver 
means receives an access request to said shared disk unit, sends said 
access request to said shared disk unit based on said configuration 
information; and 

an access control means that judges whether an access request 
issued by said application means should be sent, based on a management 
table indicating inhibited types of access requests for each access 
destination; and sends said access request to said driver means when said 
access request is not inhibited for an access destination of said access 
request, 
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wherein switching between the server operating as the primary 
system and as the standby system is conducted by inhibiting or permitting 
access requests of the standby system based on the management table. 

10. (currently amended) A computer readable storage medium 
storing a program for making a server operate as a primary system and a 
standby system by system switching, with said server being provided with 
driver means that receives an access request to a shared disk unit whose 
data are shared by a plurality of servers and that, on receiving said access 
request, sends said access request to said shared disk unit, wherein said 
program makes said server execute: 

processing of acquiring, after starting of said server at initial 
operation as both a primary system and a standby system , information on a 
configuration inside said shared disk unit, and of instructing said driver means 
based on said configuration information to identify areas of said shared disk 
unit in which an access request to said shared disk unit can be sent based on 
said configuration information, and 

processing of judging whether an access request issued by 
execution of another application program should be sent, based on a 
management table indicating inhibited types of access requests for each 
access destination, and of sending said access request to said driver means 
when said access request is not inhibited for an access destination of said 
access request, 

wherein switching between a server operating as the primary system 
and a server operating as the standby system is conducted by inhibiting or 
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permitting access requests of the standby system based on the management 
table. 

1 1 . (currently amended) A computer readable storage medium 
storing a program for making a server operate as a primary system and a 
standby system by system switching, wherein said program makes said 
server execute: 

processing of acquiring, after starting of said server at initial 
operation as both a primary system and a standby system , information on a 
configuration inside a shared disk whose data are shared by a plurality of 
servers, and of identifying areas of said shared disk unit in which an access 
request to said shared disk unit can be sent, and upon receiving an access 
request to said shared disk unit, sending said access request to said shared 
disk unit based on said configuration information; and 

processing of judging whether an access request issued by 
execution of another application program should be sent, based on a 
management table indicating inhibited types of access requests for each 
access destination, and of sending said access request to said shared disk 
unit when said access request is not inhibited for an access destination of 
said access request, 

wherein switching between a server operating as the primary system 
and a server operating as the standby system is conducted by inhibiting or 
permitting access requests of the standby system based on the management 
table. 
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12. (previously presented) The storage medium according to Claim 
11, wherein said program further functions as an OS in said server. 

13. (currently amended) A method of access control in a server that 
can operate as a primary system and a standby system by system switching, 
comprising: 

processing of acquiring, after starting of said server at initial 
operation as both a primary system and a standby system , information on a 
configuration inside a shared disk whose data are shared by a plurality of 
servers, and of identifying areas of said shared disk unit in which an access 
request to said shared disk unit can be sent, and upon receiving an access 
request to said shared disk unit, sending said access request to said shared 
disk unit based on said configuration information; and 

processing of judging whether an access request issued by execution 
of another application program should be sent, based on a management table 
indicating inhibited types of access requests for each access destination, and 
of sending said access request to said shared disk unit when said access 
request is not inhibited for an access destination of said access request, 

wherein switching between a server operating as the primary system 
and a server operating as the standby system is conducted by inhibiting or 
permitting access requests of the standby system based on the management 
table. 

14. (currently amended) A method of access control in a server 
system having a server operated as a primary system, a server operated as a 



8 



standby system, and a shared disk storing data accessed by both servers, the 
method comprising: 

a process of areas of said shared disk unit in which, after starting the 
servers at initial operation as both a primary system and a standby system , 
information on a configuration inside said shared disk unit can be acquired, 
and based on said configuration information, an access request to said 
shared disk unit can be sent, and upon receiving an access request to said 
shared disk unit, sending said access request to said shared disk unit based 
on said configuration information; 

a process of sending an access request issued by the server operated 
as the primary system, to the shared disk unit, based on a management table 
indicating inhibited access requests for each access destination, and of 
blocking an access request issued by the server operated as the standby 
system; and 

a process of changing the management table, when a fault occurs in 
the server operated as the primary system, blocking the access request 
issued by the server operated as the primary system, and sending the access 
request issued by the server operated as the standby system, to the shared 
disk unit, 

wherein switching between a server operating as the primary system 
and a server operating as the standby system is conducted by inhibiting or 
permitting access requests of the standby system based on the management 
table. 
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15. (new) The server system according to claim 1 , wherein the 
access control means of a primary system permits the applications which run 
on the primary system to read/write on the shared disk unit, 

wherein the access control means of a standby system inhibits the 
applications which run on the standby system from writing on the shared disk 
unit, and 

wherein when the primary system receives a reset request or a 
switching command, the access control means of the primary system is 
switched to inhibit read/write. 

16. (new) The server system according to claim 15, wherein the 
access control means of a standby system permits the applications which run 
on the standby system to read from the shared disk but inhibits writing. 

17. (new) The server system according to claim 15, wherein the 
reset request is transmitted from the standby system which has detected an 
error occurred in the primary system. 

18. (new) The server system according to claim 15, wherein the 
primary system which switches the access control means from permitting 
read/write to inhibiting also transmits a reset completion notification to the 
system which has received the reset request or the switching command. 
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19. (new) The server system according to claim 1 , wherein the 
access control means of a primary system permits the applications which run 
on the primary system to read/write on the shared disk unit, 

wherein the access control means of a standby system inhibits the 
applications which run on the standby system from writing on the shared disk 
unit, 

wherein when the standby system receives a reset completion 
notification or a switching command, the access control means of the standby 
system is switched to permit read/write, and 

wherein the applications which run on the standby system read/write 
on the shared disk unit based on the information on a configuration inside the 
shared disk unit acquired at initial operation. 

20. (new) The server system according to claim 19, wherein the 
standby system receives the management table transmitted from the primary 
system and changes the contents of the management table of the standby 
system. 
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